From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 9178 invoked by uid 1002); 11 Aug 2003 00:17:32 -0000 Mailing-List: contact gentoo-dev-help@gentoo.org; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@gentoo.org Received: (qmail 26435 invoked from network); 11 Aug 2003 00:17:32 -0000 Date: Mon, 11 Aug 2003 00:17:30 +0000 From: Tavis Ormandy To: Seemant Kulleen Cc: gentoo-dev@gentoo.org Message-ID: <20030811001730.GC8548@sdf.lonestar.org> References: <20030810223914.GB27538@sdf.lonestar.org> <20030810232734.GJ1819@mail.lieber.org> <20030810163656.591503f7.seemant@gentoo.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20030810163656.591503f7.seemant@gentoo.org> User-Agent: Mutt/1.5.3i Subject: Re: [gentoo-dev] Finger GLEP X-Archives-Salt: fe2d90dd-9003-4188-b000-ec1d3fe6781d X-Archives-Hash: a94b3f86ea46d8959650da6c2f681c6c On Sun, Aug 10, 2003 at 04:36:56PM -0700, Seemant Kulleen wrote: > I'm inclined to agree with Kurt here. I don't know that we should be > opening more ports than necessary, for starters, and I don't know that > the benefits necessarily outweigh the risks here. Sure, running services you dont need is never a good idea, but crippling a box to be extra paranoid about security is a shame. Besides, finger is a mature protocol and the implementations available are widely used by some of the most respected developers/projects/universities out there, and installed by default on many systems, (Slackware, fex.) Finger is also really simple, you can audit it in a few hours if you want to. > The idea for the > devrel dev/herd/project pages will be to have a uniform portal to all > sorts of info. > thats cool, but im certain keeping a .plan up to date will be easier than updating a webpage, and distributing keys with finger couldnt be simpler. imho, running fingerd also says something about a project..UNIX heritage, classic internet, and things like that :) -- ------------------------------------- taviso@sdf.lonestar.org | finger me for my gpg key. ------------------------------------------------------- -- gentoo-dev@gentoo.org mailing list